Odido Data Breach

Telecom providers typically hold a wide mix of contact, billing, and identity information, which makes them attractive targets. When that data leaks, the consequences can extend from nuisance scams to serious identity fraud.

Odido suffered a breach followed by an extortion attempt. Soon after, the data was released publicly in four separate drops across consecutive days, increasing the exposure window and making it easier for copies to spread.

The published information included names, physical addresses, phone numbers, and email addresses, alongside highly sensitive details such as dates of birth, bank account numbers, and customer service notes. Passport numbers, driver’s licence details, and European national ID numbers were also part of the exposed dataset.

Approximately 6 million unique email addresses were involved. With addresses, phones, birth dates, and government IDs in the same leak, the risk of impersonation, account takeovers, and targeted fraud attempts is significantly higher.